$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json) Hash identifier: PqsfsY3fG2ShFyvY6OsBX28rRZxOoDzMwNbqiNfiy8U= Subject key identifier: 40:A9:17:2E:CD:0B:05:44:B3:B3:87:B9:15:51:96:03:08:1B:E6:A1 Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Certificate serial: 010D0C9F4328584CF9B787D40A181DF405774000 Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 395660 IP address blocks: 2620:133:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:87:d4:0a:18:1d:f4:05:77:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=0452950d-b2cb-4dd8-914f-0e086af353a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:99:8f:6a:c3:34:53:9c:bd:e9:90:d5:13: 21:31:44:6b:d5:46:c6:52:7a:33:07:fc:f5:06:7e: e6:f2:fb:19:53:7f:fe:29:09:68:08:32:f4:34:ce: f5:62:f5:e8:59:f8:3d:29:24:36:cb:4b:53:8f:3e: 82:44:98:d2:d7:a0:13:54:bf:78:20:b2:f0:fc:4c: d5:b4:df:9f:4d:0e:62:f3:37:61:f8:b1:90:af:e6: e8:39:bc:11:72:53:73:11:29:e2:91:de:89:f0:01: c4:8e:38:73:9e:11:8d:e9:f5:62:ff:a5:d3:5f:d3: 48:7b:ab:36:2f:e6:11:8f:ad:d7:58:9b:f8:49:e4: 1a:59:de:05:e3:fe:e9:f9:e1:fa:2a:92:70:ac:76: 9c:1e:a2:f8:3a:6f:46:0c:d6:db:47:71:57:a9:68: ee:f8:38:03:6f:a3:e3:2d:54:d7:3b:fa:a7:97:ec: a7:3f:f9:93:1b:75:ca:20:d3:93:95:50:be:56:4f: e5:48:15:e6:95:f6:58:31:75:e6:e9:69:7f:d9:71: 55:b0:70:ff:c5:3d:31:82:70:c3:57:ca:b8:15:52: 21:4a:92:78:c3:9b:74:d9:d9:4e:53:48:0f:40:01: 50:0d:a2:aa:4a:17:c5:99:a8:6e:0a:ef:3d:ff:fd: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:17:2E:CD:0B:05:44:B3:B3:87:B9:15:51:96:03:08:1B:E6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl X509v3 Authority Key Identifier: keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:62:ca:5d:52:9e:90:bb:06:4f:6a:e6:c9:bf:cd:ca:f0:d4: 3a:11:83:60:5e:51:61:5c:fe:94:3c:fa:c4:e3:e7:9e:3f:39: 85:2d:05:34:f1:27:8e:47:52:a8:61:85:cf:81:b2:e5:e3:eb: 9d:69:c5:bd:5f:15:29:55:80:23:ea:4b:03:b4:d4:fb:7e:47: b5:76:70:e3:b8:7e:42:3d:2d:08:1e:e3:b7:6b:bf:0c:4a:b2: 1a:93:41:56:0c:94:40:71:c0:72:78:ee:8d:a0:63:b0:6b:63: 17:78:73:52:eb:d3:38:c8:50:fb:ba:3d:df:ed:72:00:a1:3a: 89:0d:16:c2:ae:ca:3d:e7:27:ad:13:e3:b0:c7:0c:0d:46:ca: eb:af:f3:39:bd:d3:81:cf:cf:21:29:57:5a:c3:99:d1:f8:9f: e4:70:19:cc:49:00:e1:d1:ed:27:27:d8:fa:b4:6d:0e:ff:61: 45:f5:98:1a:74:61:a9:ff:03:a0:59:e5:18:11:15:7e:e9:ee: d5:81:4f:d2:d3:70:6f:b4:bb:b7:d4:42:12:91:3e:cd:94:a8: 12:1c:66:52:78:0e:e2:18:4c:f2:05:30:7b:75:6c:58:75:5f: ee:d6:e9:c1:53:d2:52:10:c9:10:25:ce:d7:e7:01:d2:08:84: 33:a5:11:4e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz5t4fUChgd9AV3QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk MmMxMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk MDQ1Mjk1MGQtYjJjYi00ZGQ4LTkxNGYtMGUwODZhZjM1M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiaZj2rDNFOcvemQ1RMhMURr1UbGUnozB/z1 Bn7m8vsZU3/+KQloCDL0NM71YvXoWfg9KSQ2y0tTjz6CRJjS16ATVL94ILLw/EzV tN+fTQ5i8zdh+LGQr+boObwRclNzESnikd6J8AHEjjhznhGN6fVi/6XTX9NIe6s2 L+YRj63XWJv4SeQaWd4F4/7p+eH6KpJwrHacHqL4Om9GDNbbR3FXqWju+DgDb6Pj LVTXO/qnl+ynP/mTG3XKINOTlVC+Vk/lSBXmlfZYMXXm6Wl/2XFVsHD/xT0xgnDD V8q4FVIhSpJ4w5t02dlOU0gPQAFQDaKqShfFmahuCu89//06pwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFECpFy7NCwVEs7OHuRVRlgMIG+ahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5 Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5 MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd2LKXVKekLsGT2rmyb/NyvDUOhGDYF5RYVz+lDz6xOPnnj85hS0F NPEnjkdSqGGFz4Gy5ePrnWnFvV8VKVWAI+pLA7TU+35HtXZw47h+Qj0tCB7jt2u/ DEqyGpNBVgyUQHHAcnjujaBjsGtjF3hzUuvTOMhQ+7o93+1yAKE6iQ0Wwq7KPecn rRPjsMcMDUbK66/zOb3Tgc/PISlXWsOZ0fif5HAZzEkA4dHtJyfY+rRtDv9hRfWY GnRhqf8DoFnlGBEVfunu1YFP0tNwb7S7t9RCEpE+zZSoEhxmUngO4hhM8gUwe3Vs WHVf7tbpwVPSUhDJECXO1+cB0giEM6URTg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:09 2026 by rpki-client